CVE-2023-5909

High

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

icscert·CWE-297·Published 2023-11-30

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

131 chars

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

NVDen

131 chars

KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect.

NVDes

133 chars

KEPServerEX no valida adecuadamente los certificados de los clientes, lo que puede permitir que se conecten usuarios no autenticados.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N